Vulnerabilities > CVE-2005-3933 - SQL Injection vulnerability in 88Script Event Calendar 2.0

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
88script
exploit available
NVD
Published: 2005-12-01
Updated: 2011-03-08

Summary

SQL injection vulnerability in index.php in 88Script's Event Calendar 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the m parameter.

Vulnerable Configurations

Part Description Count
Application
88Script
1

Exploit-Db

description88Scripts Event Calendar 2.0 Index.PHP SQL Injection Vulnerability. CVE-2005-3933. Webapps exploit for php platform
idEDB-ID:26684
last seen2016-02-03
modified2005-11-30
published2005-11-30
reporterr0t
sourcehttps://www.exploit-db.com/download/26684/
title88Scripts Event Calendar 2.0 Index.PHP SQL Injection Vulnerability

References